Exam MCIA - Level 1 All QuestionsBrowse all questions from this exam
Go to Exam
Question 46

Refer to the exhibit. A business process involves two APIs that interact with each other asynchronously over HTTP. Each API is implemented as a Mule application. API 1 receives the initial HTTP request and invokes API 2 (in a fire and forget fashion) while API 2, upon completion of the processing, calls back into

API 1 to notify about completion of the asynchronous process.

Each API is deployed to multiple redundant Mule runtimes and a separate load balancer, and is deployed to a separate network zone.

In the network architecture, how must the firewall rules be configured to enable the above interaction between API 1 and API 2?

    Correct Answer: D

    In this network architecture, firewall rules must be configured to enable communication from each API's Mule runtimes and network zone to the load balancer of the other API. This is because API 1 needs to make a fire-and-forget call to API 2, which is best managed through the load balancer for load distribution and fault tolerance. Likewise, when API 2 completes its processing and needs to call back to API 1, it must go through the load balancer to reach any of the multiple Mule runtimes for API 1. Opening direct communication between the Mule runtimes of both APIs is less scalable and doesn't take advantage of the load balancers' abilities to manage traffic efficiently.

Discussion
Ak_2020Option: D

D is the answer. it should from API1 runtimes to API2 load balancer and API2 runtimes to API1 load balancer (call back)

Outdoor25Option: D

Feels like it should be D. C is not correct cause of the way call is made by API 1 to API2. API 1 is either using HTTP connector or flow reference to API 2. Deployment view shows call is going to load balancer for API 2. There is no firewall config needed for response to call to API 2. A cannot be answer because the request generated by API 1 is not via load balancer but via individual mule runtime. Cannot be B because firewall is about port and host access not certificates.

Outdoor25Option: C

On second thought, it should be c. Key is callback. Because it has to callback, HTTP request response should be direct. and not via Load balancer